Static task
static1
Behavioral task
behavioral1
Sample
b731ad3c88e064248bf10a3630e7a7af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b731ad3c88e064248bf10a3630e7a7af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b731ad3c88e064248bf10a3630e7a7af_JaffaCakes118
-
Size
1.7MB
-
MD5
b731ad3c88e064248bf10a3630e7a7af
-
SHA1
e27d8c99488a294775ccc97eb8d72600f4db7e1e
-
SHA256
15183d59ae0a04729bc5d0cd38388d4e916e81f8ca9027b6325b428bfb7eec97
-
SHA512
d57860eaa1c6bf9d89d1e52fb207990c70b1e30cdcb35cab3864e7c8b49c0d4f80856a5cd69c2ecd6906155cd765fb823ec43db282953ef7b064ec3d36226ece
-
SSDEEP
49152:0Y6hzON5YbeL4LxunI4TWObujJAEVfpIoP:0/hzON5Y+PR6F75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b731ad3c88e064248bf10a3630e7a7af_JaffaCakes118
Files
-
b731ad3c88e064248bf10a3630e7a7af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 948KB
IMAGE_SCN_MEM_READ
VPR_DEMO Size: 268KB - Virtual size: 268KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPR_DEMO Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPR_DEMO Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VPR_DEMO Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ